Privacy policy
Status: 30. August 2023
Responsible
Open Search Foundation e. V.
Authorized representative:
Martin Mittelbach
E-mail address:
privacy@opensearchfoundation.org
Legal notice:
https://freewebsearch.org/de/impressum/
Contact data protection officer
privacy@opensearchfoundation.org
Relevant legal bases
Processing overview
The following overview summarizes the types of data processed and the purposes of their processing and refers to the affected persons.
Types of data processed
- Contact details.
- Content data.
- Usage data.
- Meta-, communication- and procedural data.
Categories of affected persons
- Communication partners.
- Users.
- Members.
- Business and Contractual Partners.
Processing purposes
- Provision of contractual services and fulfillment of contractual obligations.
- Contact requests and communication.
- Safety measures.
- Managing and responding to inquiries.
- Feedback.
- Provision of our online services and user-friendliness.
- Information Infrastructure.
Deletion of data
The data processed by us will be deleted in accordance with the legal requirements as soon as their consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data has ceased to apply or it is not required for the purpose). If the data are not deleted because they are required for other and legally permissible purposes, their processing will be limited to these purposes. That is, the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law or whose storage is necessary for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person.
Our privacy notices may also contain further information on the retention and deletion of data, which will take precedence for the respective processing operations.
Rights of the data subjects
Performance of duties under the Articles of Association or the Rules of Procedure
We process the data of our members, supporters, interested parties, business partners or other persons (collectively “data subjects”) if we have a membership or other business relationship with them and perform our tasks and are recipients of services and benefits. In addition, we process the data of data subjects on the basis of our legitimate interests, e.g. when it is a matter of administrative tasks or public relations work.
The data processed in this context, the type, scope and purpose and the necessity of its processing, are determined by the underlying membership or contractual relationship, from which the necessity of any data disclosures also arise (in addition, we refer to required data).
We delete data that is no longer required to fulfill our statutory and business purposes. This is determined according to the respective tasks and contractual relationships. We retain the data for as long as they may be relevant for business processing, as well as with regard to any warranty or liability obligations based on our legitimate interest in regulating them. The necessity of retaining the data is reviewed regularly; in all other respects, the statutory retention obligations apply.
- Types of data processed: Inventory data (e.g. names, addresses); payment data (e.g. bank details, invoices, payment history); contact data (e.g. e-mail, telephone numbers). Contract data (e.g. subject matter of contract, term, customer category).
- Persons concerned: Users (e.g., website visitors, users of online services); Members. Business and Contractual Partners.
- Purposes of processing: Provision of contractual services and fulfillment of contractual obligations; contact requests and communication. Management and response to requests.
- Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b) DSGVO). Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).
Provision of the online offer and web hosting
We process the users’ data in order to provide them with our online services. For this purpose, we process the user’s IP address, which is necessary to transmit the content and functions of our online services to the user’s browser or terminal device.
- Types of data processed: Usage data (e.g. web pages visited, interest in content, access times). Meta, communication and procedural data (e.g. IP addresses, time data, identification numbers, consent status).
- Persons concerned: Users (e.g., website visitors, users of online services).
- Purposes of processing: Provision of our online offer and user-friendliness; information technology infrastructure (operation and provision of information systems and technical equipment (computers, servers, etc.).). Security measures.
- Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).
Further guidance on processing operations, procedures and services:
- Collection of access data and log files: Access to our online offer is logged in the form of so-called “server log files”. The server log files may include the address and name of the web pages and files accessed, the date and time of access, data volumes transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider.
The server log files may be used on the one hand for security purposes, e.g., to prevent server overload (especially in the event of abusive attacks, so-called DDoS attacks) and on the other hand, to ensure the utilization of the servers and their stability;
Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO). Deletion of data: Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data whose further storage is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified. - Hetzner: Services in the field of providing information technology infrastructure and related services (e.g., storage space and/or computing capacity); Service provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Website: https://www.hetzner.com; Privacy Policy: https://www.hetzner.com/de/rechtliches/datenschutz. Order processing contract: https://docs.hetzner.com/de/general/general-terms-and-conditions/data-privacy-faq/.
Contact and request management
When contacting us (e.g. by mail, contact form, e-mail, telephone or via social media) as well as in the context of existing user and business relationships, the information of the inquiring persons is processed to the extent necessary to respond to the contact requests and any requested measures.
- Types of data processed: Contact data (e.g. e-mail, telephone numbers); content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times). Meta, communication and procedural data (e.g. IP addresses, time data, identification numbers, consent status).
- Persons concerned: Communication partners.
- Purposes of processing: Contact requests and communication; managing and responding to requests; feedback (e.g. collecting feedback via online form). Provision of our online services and user-friendliness.
- Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).
Presence in social networks (social media)
We maintain online presences within social networks and process user data in this context in order to communicate with users active there or to offer information about us.
We would like to point out that user data may be processed outside the European Union. This may result in risks for the users because, for example, the enforcement of the users’ rights could be made more difficult.
Furthermore, user data is usually processed within social networks for market research and advertising purposes. For example, usage profiles can be created based on the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behavior and interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in to them).
For a detailed presentation of the respective forms of processing and the options to object (opt-out), we refer to the privacy statements and information provided by the operators of the respective networks.
In the case of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users’ data and can take appropriate measures and provide information directly. If you still need help, you can contact us.
- Types of data processed: Contact data (e.g. e-mail, telephone numbers); content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times). Meta, communication and procedural data (e.g. IP addresses, time data, identification numbers, consent status).
- Persons concerned: Users (e.g., website visitors, users of online services).
- Purposes of processing: Contact requests and communication; feedback (e.g., collecting feedback via online form). Marketing.
- Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).
Further guidance on processing operations, procedures and services:
- LinkedIn: Social network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Plaza Wilton Place, Dublin 2, Ireland; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Website: https://www.linkedin.com; Datenschutzerklärung: https://www.linkedin.com/legal/privacy-policy; Order processing contract: https://legal.linkedin.com/dpa; Third country transfer basis: Standard Contractual Clauses (https://legal.linkedin.com/dpa). Possibility of objection (Opt-Out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
- X: Social network; Service provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO). Privacy Policy: https://twitter.com/privacy, (Settings: https://twitter.com/personalization).
Supervisory authority responsible for us:
Bavarian State Office for Data Protection Supervision
Post office box 1349
91504 Ansbach
Telephone: 0981/180093-0
E-Mail: poststelle@lda.bayern.de
Definitions of terms
This section provides you with an overview of the terms used in this privacy statement. Insofar as the terms are defined by law, their legal definitions apply. The following explanations, on the other hand, are primarily intended to aid understanding.
- Personal data: “Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- Responsible: “Responsible” means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
- Processing: “Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and includes virtually any handling of data, be it collection, analysis, storage, transmission or deletion.
Created with free Datenschutz-Generator.de by Dr. Thomas Schwenke